This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.mft File: GrY03HT2A3ukcxHRJ0IOdvKWvlQ.mft (raw, json) Hash identifier: 1+1lgnSjURCeq+CMi0n43DiyUHV91CvaWSyN5xncDIA= Subject key identifier: AE:EC:42:D9:EE:C5:B2:96:95:E6:C2:B6:5B:AF:46:4B:9B:78:9B:9A Authority key identifier: 1A:B6:34:DC:74:F6:03:7B:A4:73:11:D1:27:42:0E:76:F2:96:BE:54 Certificate issuer: /CN=1ab634dc74f6037ba47311d127420e76f296be54 Certificate serial: 019AF208CE0A306241891D7D9FA4EC9FE81B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 05:00:54 +0000 Manifest this update: Sat 06 Dec 2025 05:00:54 +0000 Manifest next update: Sun 07 Dec 2025 05:00:54 +0000 Files and hashes: 1: 7UAk0cN_93o1IqUzEsLzy3OF8t8.roa (hash: X/DccKCPSXNbl5PAX4IP4Kv17+DSYA35yARpxNApl1o=) 2: GrY03HT2A3ukcxHRJ0IOdvKWvlQ.crl (hash: iBDO5H2WjSLUrytKKlP8Zcb5ViqcvfmuwYcHwGlfBCs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.mft rsync://rpki.ripe.net/repository/DEFAULT/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:ce:0a:30:62:41:89:1d:7d:9f:a4:ec:9f:e8:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ab634dc74f6037ba47311d127420e76f296be54 Validity Not Before: Dec 6 05:00:54 2025 GMT Not After : Dec 7 05:00:54 2025 GMT Subject: CN=aeec42d9eec5b29695e6c2b65baf464b9b789b9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:65:9b:6d:22:f9:a3:5e:4d:3c:96:b4:e3:12: 61:bf:c1:20:9e:7b:3a:8b:d2:49:8f:3f:e8:54:75: 28:f9:0e:83:f5:5f:92:61:74:5d:d0:d7:d3:28:b3: d6:fd:28:c4:db:f4:78:08:9f:c2:b5:d8:7a:fa:97: fa:47:7c:39:fe:23:db:88:5a:05:b5:02:11:ac:e1: e8:ca:c8:a7:54:29:48:2a:14:c8:c1:79:1c:82:a3: d2:b3:dc:d3:91:bb:14:b6:75:e9:02:d3:73:2a:5b: f4:dd:67:dd:d3:c6:80:54:d1:75:05:b1:93:aa:e1: d1:7c:e7:e4:47:5a:51:83:7d:b9:68:38:e7:ec:ff: 57:85:6e:22:01:e1:39:4c:56:33:18:c0:26:40:14: 61:4b:9b:06:7f:fe:1a:fb:32:63:f3:40:27:db:d1: 3d:ce:c2:a8:7a:de:ee:f7:f4:30:56:d5:cb:fb:95: 7e:e6:f3:0f:56:44:26:88:4d:72:75:94:e9:df:5f: 18:6b:9e:f9:18:a4:d2:4a:4a:86:b3:66:7e:ae:53: 09:b5:09:ab:1e:3b:66:46:2a:18:7c:71:15:2e:ed: ea:a0:f3:e5:94:50:32:d4:dd:93:c6:4a:2c:22:f7: b8:2d:51:c3:bd:a7:1e:51:2a:c8:c2:c3:c8:3e:58: 42:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:EC:42:D9:EE:C5:B2:96:95:E6:C2:B6:5B:AF:46:4B:9B:78:9B:9A X509v3 Authority Key Identifier: keyid:1A:B6:34:DC:74:F6:03:7B:A4:73:11:D1:27:42:0E:76:F2:96:BE:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:38:11:81:0f:78:6c:a3:80:a2:e7:16:03:84:4e:de:56:86: 71:45:d1:df:80:d5:c3:b8:fa:38:10:4c:98:fd:b0:7b:2f:b2: 43:f5:f0:3d:1e:5c:3a:86:b9:bb:23:c1:c5:89:37:9b:27:09: a2:85:77:a2:0d:24:bd:c8:45:f1:cc:e1:0f:54:52:fc:d4:71: 51:2d:6f:aa:1f:00:cf:f6:eb:4a:10:31:50:e1:e3:af:1c:18: 30:0b:51:70:74:ca:ad:b4:9e:c9:bd:6c:d5:2b:d8:4a:40:ac: 70:df:2a:25:11:f2:1c:a4:4c:11:1f:55:8e:e2:1b:ed:dc:8c: 5b:b6:5b:21:9f:b5:77:8e:98:7d:38:e4:22:f0:2c:6c:1c:59: 07:09:77:f0:09:bf:35:dc:a7:76:c9:95:e7:bf:96:9a:e2:dd: d0:96:20:d8:04:fc:aa:09:67:b5:79:f7:ef:ed:04:ac:2d:4f: 9e:c6:73:a6:fb:35:98:82:cd:70:14:21:62:ea:51:2b:2f:71: 01:de:eb:5c:a4:c6:76:d1:c3:3f:bc:3b:c9:44:88:34:ba:f2: 55:4a:88:76:1c:4b:9a:a9:c8:fa:e0:14:c7:30:06:f1:21:60: 5a:49:c8:18:71:fa:ff:53:6a:a0:0d:a9:fd:a5:f4:b8:0d:c6: 1f:4f:7c:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCM4KMGJBiR19n6Tsn+gbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhYjYzNGRjNzRmNjAzN2JhNDczMTFkMTI3NDIwZTc2ZjI5 NmJlNTQwHhcNMjUxMjA2MDUwMDU0WhcNMjUxMjA3MDUwMDU0WjAzMTEwLwYDVQQD EyhhZWVjNDJkOWVlYzViMjk2OTVlNmMyYjY1YmFmNDY0YjliNzg5YjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2WbbSL5o15NPJa04xJhv8Egnns6 i9JJjz/oVHUo+Q6D9V+SYXRd0NfTKLPW/SjE2/R4CJ/Ctdh6+pf6R3w5/iPbiFoF tQIRrOHoysinVClIKhTIwXkcgqPSs9zTkbsUtnXpAtNzKlv03Wfd08aAVNF1BbGT quHRfOfkR1pRg325aDjn7P9XhW4iAeE5TFYzGMAmQBRhS5sGf/4a+zJj80An29E9 zsKoet7u9/QwVtXL+5V+5vMPVkQmiE1ydZTp318Ya575GKTSSkqGs2Z+rlMJtQmr HjtmRioYfHEVLu3qoPPllFAy1N2TxkosIve4LVHDvaceUSrIwsPIPlhCHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK7sQtnuxbKWlebCtluvRkubeJuaMB8GA1UdIwQY MBaAFBq2NNx09gN7pHMR0SdCDnbylr5UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3JZMDNIVDJBM3VrY3hIUkowSU9kdktXdmxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83YTI2ZTYtZjdhZS00ZGYwLTllY2It ZDg3OWY3ZTcwOWQ2LzEvR3JZMDNIVDJBM3VrY3hIUkowSU9kdktXdmxRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy83YTI2ZTYtZjdhZS00ZGYwLTllY2ItZDg3OWY3ZTcwOWQ2 LzEvR3JZMDNIVDJBM3VrY3hIUkowSU9kdktXdmxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZDgRgQ94 bKOAoucWA4RO3laGcUXR34DVw7j6OBBMmP2wey+yQ/XwPR5cOoa5uyPBxYk3mycJ ooV3og0kvchF8czhD1RS/NRxUS1vqh8Az/brShAxUOHjrxwYMAtRcHTKrbSeyb1s 1SvYSkCscN8qJRHyHKRMER9VjuIb7dyMW7ZbIZ+1d46YfTjkIvAsbBxZBwl38Am/ NdyndsmV57+WmuLd0JYg2AT8qglntXn37+0ErC1PnsZzpvs1mILNcBQhYupRKy9x Ad7rXKTGdtHDP7w7yUSINLryVUqIdhxLmqnI+uAUxzAG8SFgWknIGHH6/1NqoA2p /aX0uA3GH098gA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:48:38 2025 by rpki-client